JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 12.167.49.152

12.167.49.152 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 100%: ?

100%

ISP	GM BUSINESS INTERIORS
Usage Type	Fixed Line ISP
ASN	AS7018
Domain Name	imaginesystems.net
Country	🇺🇸 United States of America
City	Commerce, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 12.167.49.152

Whois 12.167.49.152

IP Abuse Reports for 12.167.49.152:

This IP address has been reported a total of 19 times from 19 distinct sources. 12.167.49.152 was first reported on August 27th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 knock	2026-08-30 20:26:16 (1 day ago)	Knock-Knock honeypot brute-force: HTTP (5 total hits)	Web App Attack
🇳🇱 JCB	2026-08-30 13:02:00 (1 day ago)	12.167.49.152 - - [29/Aug/2026:20:12:42 +0300] "GET /SitePages/Forms/AllPages.aspx HTTP/1.1" 404 236 ... show more 12.167.49.152 - - [29/Aug/2026:20:12:42 +0300] "GET /SitePages/Forms/AllPages.aspx HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15" 12.167.49.152 - - [29/Aug/2026:21:00:17 +0300] "GET /_layouts/15/Authenticate.aspx HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; hu-HU) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16" ... show less	Web App Attack Hacking
🇳🇱 DrLex0	2026-08-29 22:36:21 (2 days ago)	Probing for various exploits; likely botnet drone 12.167.49.152 80 - [29/Aug/2026:21:31:18 +0000] " ... show more Probing for various exploits; likely botnet drone 12.167.49.152 80 - [29/Aug/2026:21:31:18 +0000] "GET /SitePages/Forms/AllPages.aspx HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:124.0) Gecko/20100101 Firefox/129.0" 12.167.49.152 80 - [29/Aug/2026:21:31:19 +0000] "GET / HTTP/1.1" 301 553 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.9" 12.167.49.152 80 - [29/Aug/2026:21:31:19 +0000] "GET /_vti_bin/spdisco.aspx HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10" 12.167.49.152 80 - [29/Aug/2026:22:36:08 +0000] "GET /_layouts/15/Authenticate.aspx HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 12.167.49.152 80 - [29/Aug/2026:22:36:21 +0000] "GET /_layouts/Authenticate.aspx HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0" show less	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇩🇪 ghostwarriors	2026-08-29 19:20:23 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Floofie	2026-08-29 14:17:33 (2 days ago)	12.167.49.152 - - [29/Aug/2026:10:17:33 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; I ... show more 12.167.49.152 - - [29/Aug/2026:10:17:33 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0" 12.167.49.152 - - [29/Aug/2026:10:17:33 -0400] "GET /_vti_bin/spdisco.aspx HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1 Safari/605.1.15" 12.167.49.152 - - [29/Aug/2026:10:17:33 -0400] "GET /SitePages/Forms/AllPages.aspx HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-08-29 12:33:40 (2 days ago)	Knock-Knock HTTP honeypot activity; time=2026-08-29 12:30:58; http_method=GET; http_path=/; http_pur ... show more Knock-Knock HTTP honeypot activity; time=2026-08-29 12:30:58; http_method=GET; http_path=/; http_purpose=basic_probe; http_user_agent=Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 kuj	2026-08-29 08:57:43 (2 days ago)	2026-08-29T02:57:29.429725-06:00 derp derper[586]: 2026/08/29 02:57:29 http: TLS handshake error fro ... show more 2026-08-29T02:57:29.429725-06:00 derp derper[586]: 2026/08/29 02:57:29 http: TLS handshake error from 12.167.49.152:50396: acme/autocert: missing server name 2026-08-29T02:57:30.526795-06:00 derp derper[586]: 2026/08/29 02:57:30 http: TLS handshake error from 12.167.49.152:50772: acme/autocert: missing server name 2026-08-29T02:57:43.391615-06:00 derp derper[586]: 2026/08/29 02:57:43 http: TLS handshake error from 12.167.49.152:55801: acme/autocert: missing server name ... show less	Port Scan Brute-Force
🇺🇸 ratcarcher-labs	2026-08-29 06:31:38 (2 days ago)	[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=60 attacks=3 depth=1 ... show more [Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=60 attacks=3 depth=1 node=node-ap-south canary=no human_score=35 agentic=30 cc=US asn=AT&T Enterprises, LLC \| Data provided by Ratcarcher Labs · https://ratcarcher-labs.com · docs https://api.ratcarcher-labs.com/api/v1/public/docs show less	Port Scan Bad Web Bot
Anonymous	2026-08-29 06:06:35 (2 days ago)	12.167.49.152 - - [29/Aug/2026:15:06:35 +0900] "GET /SitePages/Forms/AllPages.aspx HTTP/1.1" 403 439 ... show more 12.167.49.152 - - [29/Aug/2026:15:06:35 +0900] "GET /SitePages/Forms/AllPages.aspx HTTP/1.1" 403 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:70.0) Gecko/20100101 Firefox/70.0" 12.167.49.152 - - [29/Aug/2026:15:06:35 +0900] "GET /_vti_bin/spdisco.aspx HTTP/1.1" 403 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 12.167.49.152 - - [29/Aug/2026:15:06:35 +0900] "GET / HTTP/1.1" 403 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.13 Safari/605.1.15" ... show less	Brute-Force
🇺🇸 jormaster3k	2026-08-28 23:33:58 (2 days ago)	Attack against Apache (too many 404s)	Web App Attack
🇺🇸 HamSammich	2026-08-28 10:56:52 (3 days ago)	Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-08-28T10:56Z).	Brute-Force Web App Attack
🇨🇳 WMK965	2026-08-28 07:21:07 (3 days ago)	12.167.49.152 - - [28/Aug/2026:15:21:03 +0800] "GET /SitePages/Forms/AllPages.aspx HTTP/1.1" 444 0 " ... show more 12.167.49.152 - - [28/Aug/2026:15:21:03 +0800] "GET /SitePages/Forms/AllPages.aspx HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" "-" 12.167.49.152 - - [28/Aug/2026:15:21:03 +0800] "GET /_vti_bin/spdisco.aspx HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" "-" 12.167.49.152 - - [28/Aug/2026:15:21:04 +0800] "GET /_vti_bin/spdisco.aspx HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" "-" show less	Port Scan Web App Attack
🇦🇺 dyln	2026-08-27 23:29:13 (3 days ago)	Dyls honeypot brute-force: proto8 (8 total hits)	Brute-Force
Anonymous	2026-08-27 20:29:43 (4 days ago)	Web application attack detected.	Web App Attack
🇺🇸 FreeMyIP	2026-08-27 17:49:10 (4 days ago)	Automated fail2ban report: web application attack / scanning for exploitable paths.	Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.222

🇺🇸 147.185.132.221

🇬🇧 139.59.186.194

🇩🇪 69.5.169.56

🇫🇷 51.68.234.131

🇧🇷 177.69.130.249

🇮🇳 152.67.9.154

🇺🇸 147.185.132.219

🇺🇸 147.185.132.211

🇺🇸 147.185.132.21

🇺🇸 136.118.171.124

🇺🇸 8.229.96.171

🇺🇸 216.244.66.248

🇩🇪 207.154.230.149

🇺🇸 147.185.132.209

🇺🇸 147.185.132.207

🇹🇷 78.176.98.248

🇹🇼 61.220.96.57

🇨🇳 223.199.172.147

🇺🇸 209.50.166.111